A-2.1, r. 4.1 - Regulation respecting the confidentiality policies of public bodies that collect personal information through technological means

Section 2 Disposition versions

2024-01-01

2. A confidentiality policy referred to in section 63.4 of the Act must contain at least

(1)  the name of the public body that collects the personal information and, where the information is collected by a third person on behalf of the public body, the name of that third person;

(2)  a description of the collected personal information;

(3)  the purposes for which the personal information is collected;

(4)  the categories of persons who, within the public body, have access to the personal information;

(5)  the means by which the personal information is collected;

(6)  if applicable, a description of the measures that may be taken to refuse the collection of personal information and the potential consequences of that refusal;

(7)  if applicable, a mention regarding the technological means available so that the person concerned by the personal information may consult or correct that information;

(8)  a mention regarding the rights of access and correction provided for by the Act, as well as the name of the person in charge of the protection of personal information at the public body and the contact information to communicate with that person;

(9)  if applicable, the name of the third persons or categories of third persons to whom it is necessary to release personal information for the purposes referred to in paragraph 3, and specifying that information or categories of information and those purposes;

(10)  if applicable, a mention as to the possibility that the personal information may be released outside Québec;

(11)  a brief description of the measures taken to ensure the confidentiality and security of personal information;

(12)  a mention of the right of the person concerned by the personal information to pursue the process for dealing with complaints regarding the protection of personal information provided for in the governance rules of the public body with respect to personal information, published under section 63.3 of the Act;

(13)  the contact information of the person, the concerned body or an administrative unit of that body to which questions regarding the confidentiality policy may be addressed;

(14)  the date of coming into force of the confidentiality policy and its most recent update, if applicable.

O.C. 1544-2023, s. 2.

Not in force

In force: 2024-01-01

2. A confidentiality policy referred to in section 63.4 of the Act must contain at least

(1)  the name of the public body that collects the personal information and, where the information is collected by a third person on behalf of the public body, the name of that third person;

(2)  a description of the collected personal information;

(3)  the purposes for which the personal information is collected;

(4)  the categories of persons who, within the public body, have access to the personal information;

(5)  the means by which the personal information is collected;

(6)  if applicable, a description of the measures that may be taken to refuse the collection of personal information and the potential consequences of that refusal;

(7)  if applicable, a mention regarding the technological means available so that the person concerned by the personal information may consult or correct that information;

(8)  a mention regarding the rights of access and correction provided for by the Act, as well as the name of the person in charge of the protection of personal information at the public body and the contact information to communicate with that person;

(9)  if applicable, the name of the third persons or categories of third persons to whom it is necessary to release personal information for the purposes referred to in paragraph 3, and specifying that information or categories of information and those purposes;

(10)  if applicable, a mention as to the possibility that the personal information may be released outside Québec;

(11)  a brief description of the measures taken to ensure the confidentiality and security of personal information;

(12)  a mention of the right of the person concerned by the personal information to pursue the process for dealing with complaints regarding the protection of personal information provided for in the governance rules of the public body with respect to personal information, published under section 63.3 of the Act;

(13)  the contact information of the person, the concerned body or an administrative unit of that body to which questions regarding the confidentiality policy may be addressed;

(14)  the date of coming into force of the confidentiality policy and its most recent update, if applicable.

O.C. 1544-2023, s. 2.